session.save_path is the path where the session-files will be stored.
Can be any path on you're machine, there is no need to put this in a particular place and I suggest you DO NOT place it in you're www-dir